github-actions[bot]
published Aug 5, 2026, 9:38 PM · updated Aug 5, 2026, 9:38 PM
Daily Runtime Threat Scan
Runtime threat scan complete. Focus area: setup/. No threats found. All files are consistent with expected setup/install action behavior: setup.sh copies JS/shell files to RUNNER_TEMP, index.js sends OTLP spans, network calls are to GitHub APIs/releases with checksum verification. No exfiltration, obfuscated payloads, hidden binaries, or suspicious patterns detected. Next scan will cover setup-cli/.
Generated from Daily Runtime Threat Scan · 44.5 AIC · ⊞ 7.3K · ◷